[Samba] \System32\GroupPolicy named pipe?

Andrew Bartlett abartlet at samba.org
Sun Dec 1 01:26:00 GMT 2002

On Sun, 2002-12-01 at 11:48, Andrew Bartlett wrote:
> On Sun, 2002-12-01 at 08:08, Jason Spence wrote:
> > Hi -
> > 
> > I'm using samba to connect some windows boxen to a distributed set of
> > unix machines.  I'm trying to unify some of the administrative
> > interfaces via mmc, specifically the group policy stuff.  When I try
> > to use the Group Policy snap-in to connect to my samba 2.2.1 servers,
> > I see the windows box do a Tree Connect Andx to
> > ADMIN$\System32\GroupPolicy, and then the samba box responds with
> > 0x0004, permission denied.  Then the windows box goes and tries to
> > create ADMIN$\System32, which also fails.  I have sniffer dumps of
> > the exchange here (libpcap format, use Ethereal to open): 
> > 
> > http://lightconsulting.com/~thalakan/gpdump.cap
> A comparitive capture of what Win2k does could be useful here.
> > Poking around in the samba source code, it looks like ADMIN$ is
> > aliased to IPC$, but the System32 named pipe isn't created anywhere.
> > Does anyone have any thoughts on implementing this and whatever
> > associated protocol is necessary to modify server-side group policies
> > over it?
> ADMIN$ is actually a disk share under NT - so it's not a system32 pipe,
> but actually c:\winnt\system32.   (admin$ is an alias for
> %systempath%).  

Just a clarification: You can do IPC operations on disk shares, and some
domain clients use ADMIN$ for the IPC part of the domain join.  As Samba
doesn't want to provide a 'disk' share that admins can't control, it
maps it as an IPC share.

Andrew Bartlett

Andrew Bartlett                                 abartlet at pcug.org.au
Manager, Authentication Subsystems, Samba Team  abartlet at samba.org
Student Network Administrator, Hawker College   abartlet at hawkerc.net
http://samba.org     http://build.samba.org     http://hawkerc.net
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.samba.org/archive/samba/attachments/20021201/79cc92b4/attachment.bin

More information about the samba mailing list